Privacy Policy

Our principle is simple: collect only what a feature you use actually needs, and delete it when you ask, under Thailand's Personal Data Protection Act, B.E. 2562 (PDPA). This page walks through the site feature by feature and says what each one really stores. If you only browse prices, we do not know who you are.

Browsing (no account needed)

• Price pages, the catalog, articles and the marketplace are all readable without signing in, and no visitor profile is built.
• Operational counters (for example, clicks out to a shop, or taps on a seller-contact button) are stored as aggregate totals only, no visitor identifier, no cookie, no IP rides along with the event.
• The footer's live-visitor counter works from a random temporary identifier your browser invents for the current tab session. It is linked to nothing, no account, no IP, no pages, refreshed while the tab is open, and deleted from our systems within an hour of the tab closing.
• Usage analytics (PostHog) is consent-gated: events tied to a person are sent only after consent, and no event of any kind may carry a phone number, an email address, or text a user typed.

Member accounts

• Sign-in is via LINE or Google. We store what the provider sends: display name, email and profile image, no password ever lives on our systems.
• The only cookie in use is the session cookie for sign-in. There are no advertising or cross-site tracking cookies.
• Premium status is stored as an expiry date on the account.
• System emails (slip review results, notices about your listings) go to the account email only.

Marketplace: seller data

• Thai phone verification by OTP stores its result as a salted hash of the number plus its last 4 digits, the full number is never stored anywhere in the system.
• Your LINE contact ID is stored and shown to buyers only with the consent you give at listing creation; the moment of consent is recorded, and closing the listing withdraws it.
• Listing photos (including the Proof Shot) live on the system's storage for the life of the listing.
• Listings auto-expire after 30 days unless renewed, stale data does not linger in the marketplace.
• All seller data can be deleted: on request, the system deletes the OTP rows, the phone hash, last-4, LINE ID and every consent flag, and closes all open listings. Full erasure (old listing rows and photo files) is completed on a PDPA data-subject request.

Reports and Snapshots

• Creating a price Snapshot and filing a report are rate-limited per hour using a hash of the IP address, the system stores only the hash and an hourly counter, never the real IP.
• Reports go to the moderation team only, are never shown publicly, and a reporter's identity is not revealed to the person reported.
• A Snapshot itself contains only price numbers, no personal data about its creator.
• A «Report a problem» message stores what you write, an optional screenshot, the page you came from, your browser's name, screen size and theme, and your account if you are signed in (or the contact you leave if not); reports are kept for 12 months, and a screenshot is deleted with its report.

Payment slips (premium members)

• A slip uploaded to verify payment is kept for review only, and the image file is deleted automatically after 30 days, the review record (approved/rejected, when) is kept without the image.

Shop orders

• An order keeps the recipient name, phone, address and contact email you type at checkout for the life of that order, what the parcel needs, and nothing more.
• Partner shops are independent shops that sell their own cards on ThaiRift. When you order from one, that shop receives your name, address and phone and the payment slip you upload, for that shop's order only: the slip so the shop can confirm your payment, the rest so it can deliver your parcel. It receives nothing about your other orders.
• Your name, address, phone and slip are hidden from the shop 14 days after the parcel ships.
• The partner shop is a separate data controller for what it receives: it decides how it uses those details, within the law, and answers to you for that use. ThaiRift passes them on only for that order and asks every shop to use them for that order only.

What we do not store

• Full phone numbers, always a hash plus the last 4 digits.
• Real user IPs in rate-limit counters, always a hash.
• Anyone's card or bank account details, money never moves through our systems.
• The prices shown on the site are public product data, not personal data.

Your rights under the PDPA

You have the right to access, correct and delete your personal data:

• Marketplace seller data is deleted as described in "Marketplace, seller data" above.
• Any other request, including access, correction, or deletion of your data, can be sent through ubu.dev or the ThaiRift Facebook page; requests reach the operating team directly.
• We act on requests at no charge.

Changes to this policy

This policy changes when the site's features change; the latest date always shows at the top. The one rule that does not change: collect only what is needed, delete when you ask.

The marketplace terms live at Marketplace Terms of Use.